Ryan McCue

The WordPress REST API is integrated into WordPress since 4.7, so you no longer need this plugin. Additionally, these are all false positives.

It’s like it got dropped 🙁

Not dropped, just in hibernation, as my focus is split across a lot of different projects. The beta importer now has admin UI in the works and coming soon, see this pull request for more about that. I’ll be writing an update about it soon.

I pinged @tlovett1 (the author of CCF) about this, but doesn’t look like he’s gotten to it yet. 🙂

The REST API uses WP’s built-in authentication system, however requires a nonce to be passed unless specific handling is added for it.

Your best bet for custom authentication is to hook into the determine_current_user filter in core to do authentication, and then filter json_authentication_errors to integrate with the API. WP_JSON_Server::check_authentication() has documentation on how to use the latter. 🙂

You should be able to do something like the following:

$endpoint = new WP_JSON_Posts();
$data = $endpoint->get_post( 4 );

I’d love to hear any feedback on what exactly we could be doing better here. 🙂

WordPress’ WP Query supports this through the post_format arg, but this is not marked as a public query argument. You can add the following to your site’s code to enable it as a public query argument, but keep in mind that it may cause privacy concerns:

add_filter( 'json_query_vars', function ( $vars ) {
    $vars[] = 'post_format';
    return $vars;
} );